@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/core/mission-context/resolver-parts.d.ts

@@ -0,0 +1,57 @@
+import { type ArtifactDescriptor, type MissionContext } from "./types.js";
+/**
+ * mtime+size fingerprint of every source a response depends on.
+ *
+ * `paths` MUST include the iterate document and the per-run agent-doc, not just
+ * the adopted spec + event log: editing only `mini-plan.md` would otherwise
+ * leave the rev (and therefore the cache) unchanged, serving a stale planned
+ * requirement and a stale document id (external code review, openai MEDIUM).
+ */
+export declare function computeSourceRev(paths: string[], extra: (string | number)[]): string;
+/**
+ * Per-document fingerprint embedded in the opaque id.
+ *
+ * The context-wide rev is not enough for AC3 — it is derived from the adopted
+ * spec + event log, so editing only the iterate document would leave it
+ * unchanged and the detail endpoint would serve the NEW body as `ok`. This is
+ * compared at read time, so a changed document reports `stale`.
+ */
+export declare function docFingerprint(absolute: string): string;
+export declare function unavailableArtifacts(note: string): ArtifactDescriptor[];
+interface CacheEntry {
+    rev: string;
+    context: MissionContext;
+}
+/** Read-through cache keyed `{projectRoot, sessionUuid, runId}`, validated by `rev`. */
+export declare const cache: Map<string, CacheEntry>;
+export declare const CACHE_CAP = 256;
+/** Test-only: drop the module-level cache between cases. */
+export declare function _clearResolverCache(): void;
+/**
+ * Bounded read of a document body (mid-run planned impact + the detail
+ * endpoint). Atomic: the size cap is enforced against the SAME descriptor the
+ * bytes come from, so a swapped path cannot slip past it (CodeQL
+ * js/file-system-race).
+ */
+export declare function readBounded(absolute: string): string | null;
+/**
+ * A typed-`unavailable` response for the integrity case (AC5): a pointer that
+ * FAILED VALIDATION. It must SHOW as unavailable and must NOT be persisted —
+ * never a quiet fall-through to "No run data yet" (external review, openai HIGH).
+ *
+ * The second case this once served — a pointer naming a worktree git does not
+ * register — was removed 2026-07-21: measured, that is the ordinary
+ * post-Finalize state of every pointer on disk, not an integrity failure, and
+ * treating it as one erased the artifacts of every finished run. Reading is
+ * still confined to registered roots by `chooseRoot`, which never used the
+ * unregistered path in the first place.
+ */
+export declare function integrityResult(scenario: MissionContext["scenario"], missionTabVisible: boolean, rev: string, note: string, runId: string | null): {
+    context: MissionContext;
+    associateRunId: null;
+    associateSource: "iterate_active_pointer";
+};
+/** A context with no artifacts — the shape every non-iterate scenario returns. */
+export declare function emptyContext(scenario: MissionContext["scenario"], missionTabVisible: boolean, sourceRev: string): MissionContext;
+export {};
+//# sourceMappingURL=resolver-parts.d.ts.map

package/server/dist/core/mission-context/resolver-parts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver-parts.d.ts","sourceRoot":"","sources":["../../../src/core/mission-context/resolver-parts.ts"],"names":[],"mappings":"AAeA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AAEpB;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,MAAM,CAYpF;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOvD;AAoBD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAavE;AAED,UAAU,UAAU;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,cAAc,CAAC;CACzB;AAED,wFAAwF;AACxF,eAAO,MAAM,KAAK,yBAAgC,CAAC;AACnD,eAAO,MAAM,SAAS,MAAM,CAAC;AAE7B,4DAA4D;AAC5D,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE3D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,EACpC,iBAAiB,EAAE,OAAO,EAC1B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB;IAAE,OAAO,EAAE,cAAc,CAAC;IAAC,cAAc,EAAE,IAAI,CAAC;IAAC,eAAe,EAAE,wBAAwB,CAAA;CAAE,CAU9F;AAED,kFAAkF;AAClF,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,EACpC,iBAAiB,EAAE,OAAO,EAC1B,SAAS,EAAE,MAAM,GAChB,cAAc,CAahB"}

package/server/dist/core/mission-context/resolver-parts.js

@@ -0,0 +1,136 @@
+/*
+ * core/mission-context/resolver-parts.ts — pure helpers + the read-through
+ * cache for the resolver.
+ *
+ * Split out of `resolver.ts` to keep both files within the size rule. These are
+ * the revision / caching / response-shape primitives; the orchestration that
+ * uses them stays in resolver.ts.
+ */
+import { createHash } from "node:crypto";
+import { statSync } from "node:fs";
+import { readBoundedFile } from "./fs-read.js";
+import { MAX_DOC_BYTES } from "./worktree-roots.js";
+import { MISSION_CONTEXT_SCHEMA_VERSION, } from "./types.js";
+/**
+ * mtime+size fingerprint of every source a response depends on.
+ *
+ * `paths` MUST include the iterate document and the per-run agent-doc, not just
+ * the adopted spec + event log: editing only `mini-plan.md` would otherwise
+ * leave the rev (and therefore the cache) unchanged, serving a stale planned
+ * requirement and a stale document id (external code review, openai MEDIUM).
+ */
+export function computeSourceRev(paths, extra) {
+    const h = createHash("sha256");
+    for (const p of paths) {
+        try {
+            const st = statSync(p);
+            h.update(`${p}:${st.mtimeMs}:${st.size}`);
+        }
+        catch {
+            h.update(`${p}:absent`);
+        }
+    }
+    for (const e of extra)
+        h.update(`|${e}`);
+    return h.digest("hex").slice(0, 16);
+}
+/**
+ * Per-document fingerprint embedded in the opaque id.
+ *
+ * The context-wide rev is not enough for AC3 — it is derived from the adopted
+ * spec + event log, so editing only the iterate document would leave it
+ * unchanged and the detail endpoint would serve the NEW body as `ok`. This is
+ * compared at read time, so a changed document reports `stale`.
+ */
+export function docFingerprint(absolute) {
+    try {
+        const st = statSync(absolute);
+        return `${st.size}:${st.mtimeMs}`;
+    }
+    catch {
+        return "absent";
+    }
+}
+/**
+ * ALL SIX §6 artifacts, typed `unavailable` with one honest note.
+ *
+ * Used for the integrity cases (a pointer that failed validation, a worktree
+ * git does not recognise): AC5 requires those to SHOW as unavailable rather
+ * than fall through to a silent "nothing here". Every artifact kind must be
+ * covered — omitting one would HIDE it on exactly the code path where the
+ * integrity problem is worst.
+ */
+const UNAVAILABLE_KINDS = [
+    { kind: "spec", label: "Spec" },
+    { kind: "requirement", label: "Requirement" },
+    { kind: "tests", label: "Tests" },
+    { kind: "review", label: "Review" },
+    { kind: "decisions", label: "Decisions" },
+    { kind: "commit", label: "Commit" },
+];
+export function unavailableArtifacts(note) {
+    return UNAVAILABLE_KINDS.map(({ kind, label }) => ({
+        kind,
+        label,
+        state: "unavailable",
+        summary: null,
+        receipt: null,
+        note,
+        detail: null,
+    }));
+}
+/** Read-through cache keyed `{projectRoot, sessionUuid, runId}`, validated by `rev`. */
+export const cache = new Map();
+export const CACHE_CAP = 256;
+/** Test-only: drop the module-level cache between cases. */
+export function _clearResolverCache() {
+    cache.clear();
+}
+/**
+ * Bounded read of a document body (mid-run planned impact + the detail
+ * endpoint). Atomic: the size cap is enforced against the SAME descriptor the
+ * bytes come from, so a swapped path cannot slip past it (CodeQL
+ * js/file-system-race).
+ */
+export function readBounded(absolute) {
+    return readBoundedFile(absolute, MAX_DOC_BYTES)?.text ?? null;
+}
+/**
+ * A typed-`unavailable` response for the integrity case (AC5): a pointer that
+ * FAILED VALIDATION. It must SHOW as unavailable and must NOT be persisted —
+ * never a quiet fall-through to "No run data yet" (external review, openai HIGH).
+ *
+ * The second case this once served — a pointer naming a worktree git does not
+ * register — was removed 2026-07-21: measured, that is the ordinary
+ * post-Finalize state of every pointer on disk, not an integrity failure, and
+ * treating it as one erased the artifacts of every finished run. Reading is
+ * still confined to registered roots by `chooseRoot`, which never used the
+ * unregistered path in the first place.
+ */
+export function integrityResult(scenario, missionTabVisible, rev, note, runId) {
+    return {
+        context: {
+            ...emptyContext(scenario, missionTabVisible, rev),
+            runId,
+            artifacts: unavailableArtifacts(note),
+        },
+        associateRunId: null,
+        associateSource: "iterate_active_pointer",
+    };
+}
+/** A context with no artifacts — the shape every non-iterate scenario returns. */
+export function emptyContext(scenario, missionTabVisible, sourceRev) {
+    return {
+        schemaVersion: MISSION_CONTEXT_SCHEMA_VERSION,
+        scenario,
+        missionTabVisible,
+        runId: null,
+        // Only a resolved iterate with a registered worktree is ever live.
+        runLive: false,
+        artifacts: [],
+        tests: null,
+        servesFrId: null,
+        sourceRev,
+    };
+}
+//# sourceMappingURL=resolver-parts.js.map

package/server/dist/core/mission-context/resolver-parts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver-parts.js","sourceRoot":"","sources":["../../../src/core/mission-context/resolver-parts.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,8BAA8B,GAG/B,MAAM,YAAY,CAAC;AAEpB;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAe,EAAE,KAA0B;IAC1E,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACvB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,iBAAiB,GAA0D;IAC/E,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;IAC/B,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE;IAC7C,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;IACjC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;IACnC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE;IACzC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;CACpC,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,iBAAiB,CAAC,GAAG,CAC1B,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAClB,CAAC;QACC,IAAI;QACJ,KAAK;QACL,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,MAAM,EAAE,IAAI;KACb,CAAuB,CAC3B,CAAC;AACJ,CAAC;AAOD,wFAAwF;AACxF,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;AACnD,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC;AAE7B,4DAA4D;AAC5D,MAAM,UAAU,mBAAmB;IACjC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,eAAe,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAoC,EACpC,iBAA0B,EAC1B,GAAW,EACX,IAAY,EACZ,KAAoB;IAEpB,OAAO;QACL,OAAO,EAAE;YACP,GAAG,YAAY,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC;YACjD,KAAK;YACL,SAAS,EAAE,oBAAoB,CAAC,IAAI,CAAC;SACtC;QACD,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,wBAAwB;KAC1C,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAC1B,QAAoC,EACpC,iBAA0B,EAC1B,SAAiB;IAEjB,OAAO;QACL,aAAa,EAAE,8BAA8B;QAC7C,QAAQ;QACR,iBAAiB;QACjB,KAAK,EAAE,IAAI;QACX,mEAAmE;QACnE,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,EAAE;QACb,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,IAAI;QAChB,SAAS;KACV,CAAC;AACJ,CAAC"}

package/server/dist/core/mission-context/resolver.d.ts

@@ -0,0 +1,11 @@
+export { _clearResolverCache } from "./resolver-parts.js";
+export { readDocumentBody } from "./document-read.js";
+import type { ResolveDeps, ResolveRequest, ResolveResult } from "./resolver-io.js";
+export type { ResolveDeps, ResolveRequest, ResolveResult, } from "./resolver-io.js";
+/**
+ * Resolve the Mission context. Pure read — the caller performs the association
+ * write, because persistence needs the store's lock and this module stays
+ * side-effect-free (making the "one write" auditable in exactly one place).
+ */
+export declare function resolveMissionContext(req: ResolveRequest, deps?: ResolveDeps): Promise<ResolveResult>;
+//# sourceMappingURL=resolver.d.ts.map

package/server/dist/core/mission-context/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../src/core/mission-context/resolver.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAWtD,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAmBnF,YAAY,EACV,WAAW,EACX,cAAc,EACd,aAAa,GACd,MAAM,kBAAkB,CAAC;AAE1B;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,cAAc,EACnB,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,aAAa,CAAC,CAmQxB"}

package/server/dist/core/mission-context/resolver.js

@@ -0,0 +1,261 @@
+/*
+ * core/mission-context/resolver.ts — orchestration (CONTRACT §5 / §5.2).
+ *
+ * Stateless read (Architecture rule 4) with ONE deliberate exception: the
+ * durable `task.missionContext` association (see association.ts). `task.runId`
+ * is deliberately NOT touched — it means a PIPELINE run and overloading it
+ * would corrupt that join (external-review GPT #4).
+ *
+ * Caching is keyed `{projectRoot, sessionUuid, runId}` and validated by a
+ * source-mtime `rev` (resolver-parts.ts); merge is refreshed per call
+ * (merge-refresh.ts) because it is the one field no source file tracks.
+ */
+import { cache, CACHE_CAP, computeSourceRev, docFingerprint, integrityResult, readBounded, } from "./resolver-parts.js";
+export { _clearResolverCache } from "./resolver-parts.js";
+// Re-exported so the detail endpoint keeps its single import site (§5.2).
+export { readDocumentBody } from "./document-read.js";
+import { loadFoldMap, SPEC_REL_PARTS, specPath } from "./fold-map.js";
+import { checkSquashMerged, extractPrMarker, readOriginSlug } from "./merge-check.js";
+import { refreshMerge } from "./merge-refresh.js";
+import { mintDocId } from "./doc-ids.js";
+import { readIteratePointer } from "./pointer.js";
+import { detectScenario } from "./scenario.js";
+import { buildRequirementArtifact, buildSpecArtifact } from "./artifacts.js";
+import { buildCommitArtifact } from "./artifacts-commit.js";
+import { buildSlice2Artifacts, slice2RevPaths } from "./slice2-sources.js";
+import { buildNonIterateContext } from "./slice3-sources.js";
+import { eventsPath, iterateDocPath, readIterateDoc } from "./iterate-record.js";
+import { resolveWorkCompleted } from "./merged-events.js";
+import { campaignSpecCandidates, specCandidates, specHintCandidate, } from "./spec-candidates.js";
+import { recoverRunIdFromTranscript } from "./run-id-recovery.js";
+import { toMissionTests } from "./artifacts-tests.js";
+import { chooseRoot, readAllowedRootsCached, resolveFirstDoc } from "./worktree-roots.js";
+import { MISSION_CONTEXT_SCHEMA_VERSION, } from "./types.js";
+/**
+ * Resolve the Mission context. Pure read — the caller performs the association
+ * write, because persistence needs the store's lock and this module stays
+ * side-effect-free (making the "one write" auditable in exactly one place).
+ */
+export async function resolveMissionContext(req, deps = {}) {
+    const { projectRoot, sessionUuid } = req;
+    const pointer = readIteratePointer(projectRoot, sessionUuid);
+    // LAZY. The table calls this only if rules 1-4 all miss (scenario.ts rule 5),
+    // so a pointer-, association-, pipeline- or campaign-identified task pays
+    // nothing; a successful recovery is persisted below, so a task that does reach
+    // it pays once and never again.
+    //
+    // "At most once per resolve" is pinned by a TEST over the table
+    // (recovery-schedule.test.ts) rather than by a memo guard here. The external
+    // plan review proposed the guard for a future rule that consulted the footer
+    // twice — but a guard would make that mistake invisible, and this is a hot
+    // read path where silence is exactly what produced the finding being fixed.
+    const decision = detectScenario({
+        pointer,
+        association: req.association ?? null,
+        recoverTranscriptRunId: () => recoverRunIdFromTranscript(projectRoot, req.transcript, sessionUuid),
+        actions: req.actions,
+        runConfigStatus: req.runConfigStatus,
+        phaseTaskId: req.phaseTaskId,
+        taskRunId: req.taskRunId,
+        campaignSlug: req.campaignSlug,
+        hasCampaignRecord: req.hasCampaignRecord,
+    });
+    const baseRevPaths = [specPath(projectRoot), eventsPath(projectRoot)];
+    // A pointer that failed validation is an integrity signal, not an absence.
+    if (decision.pointerInvalidReason) {
+        return integrityResult(decision.scenario, decision.missionTabVisible, computeSourceRev(baseRevPaths, [decision.pointerInvalidReason]), "This session's run record could not be verified, so its artifacts are unavailable.", null);
+    }
+    // Everything that is not a resolved iterate. S1 left scenarios 3 and 5 on
+    // "today's behavior"; S3 gives them native artifacts (slice3-sources.ts).
+    // Scenarios 1/4 and a hidden custom-actions tab still carry no rail.
+    if (decision.scenario !== "iterate" || !decision.runId) {
+        return {
+            context: buildNonIterateContext({
+                taskId: req.taskId,
+                sessionUuid,
+                projectRoot,
+                scenario: decision.scenario,
+                missionTabVisible: decision.missionTabVisible,
+                baseRevPaths,
+                pipeline: req.pipeline,
+                campaign: req.campaign,
+                campaignSlug: req.campaignSlug,
+            }),
+            associateRunId: null,
+            associateSource: "iterate_active_pointer",
+        };
+    }
+    const runId = decision.runId;
+    const slug = pointer.status === "ok" ? pointer.pointer.slug : null;
+    const worktreePath = pointer.status === "ok" ? pointer.pointer.worktreePath : null;
+    const roots = await readAllowedRootsCached(projectRoot, { git: deps.git });
+    // A worktree git does not know is simply NOT USED as a read root — that is
+    // `chooseRoot`'s contract, and it is the normal post-Finalize state, not an
+    // integrity failure. MEASURED 2026-07-21: git registered 0 of this project's
+    // 20 live pointers' worktrees (removed at Finalize, directory left behind),
+    // and the earlier hard failure here erased all six artifacts for every one of
+    // them although every run had its record in the main root. See ADR.
+    const chosen = chooseRoot(roots, worktreePath);
+    // --- Records (the spec candidates below are built from them). The event
+    // lookup is (mtime,size)-indexed: ahead of the cache check it is a Map hit.
+    const iterateDoc = readIterateDoc(projectRoot, runId);
+    // Working tree first, then — for a FINISHED run whose worktree is gone
+    // (`!isWorktree`) and whose row is not local — the default remote ref where
+    // the squash landed it. This is the "merged but not pulled" case that
+    // otherwise leaves only Decisions on the rail (merged-events.ts).
+    const { events, mergedRefMiss } = await resolveWorkCompleted(projectRoot, runId, chosen.isWorktree, { git: deps.git });
+    const run = events.status === "found" ? events.run : null;
+    // --- Spec: known layout, agent-doc hint, then that same campaign path rebuilt
+    // from the never-evicted event log — APPENDED, so preference order is
+    // unchanged and it only adds reach once the doc evicts (trg-92c0c36b).
+    const hint = specHintCandidate(iterateDoc?.specHint);
+    const candidates = [
+        ...specCandidates(runId, slug),
+        ...(hint ? [hint] : []),
+        ...campaignSpecCandidates(chosen.root, run?.campaign, run?.subIterateId),
+    ];
+    const doc = resolveFirstDoc(chosen.root, candidates);
+    // The rev covers EVERY source used, incl. the iterate + agent docs AND the
+    // Slice-2 sources. An input missing from here is an input FROZEN by the cache.
+    const rev = computeSourceRev([
+        ...baseRevPaths,
+        iterateDocPath(projectRoot, runId),
+        ...slice2RevPaths(projectRoot, runId),
+        ...(doc.ok ? [doc.absolute] : []),
+    ], [runId, chosen.root, req.taskId]);
+    // Task terminal state is server-owned input, not a filesystem revision. It
+    // must participate in the cache identity so a completed task cannot reuse a
+    // previously-live context while its worktree and event log are unchanged.
+    const cacheKey = `${projectRoot}::${sessionUuid}::${runId}::${req.taskTerminal ? "terminal" : "active"}`;
+    // Persist on a LIVE pointer, and on a corroborated transcript recovery — which
+    // is the whole point of the recovery: pay the scan once. Read back off the
+    // WINNING rule, so the id and its provenance cannot disagree; an id that came
+    // from the store is not re-persisted.
+    const associate = decision.runIdSource === "pointer" || decision.runIdSource === "transcript" ? runId : null;
+    const associateSource = decision.runIdSource === "transcript" ? "transcript_run_id" : "iterate_active_pointer";
+    const hit = cache.get(cacheKey);
+    if (hit && hit.rev === rev) {
+        // NOT returned verbatim — merge is the one time-varying field and must be
+        // re-derived, or it freezes at "pending" forever. See merge-refresh.ts.
+        return {
+            context: await refreshMerge(hit.context, projectRoot, req.transcript, deps),
+            associateRunId: associate,
+            associateSource,
+        };
+    }
+    let documentId = null, title = null, specText = null;
+    if (doc.ok) {
+        // BY INDEX — a suffix-compare against the realpath misses on a leaf-casing
+        // normalisation and silently pairs candidates[0] with the OTHER file's
+        // fingerprint (see resolveFirstDoc).
+        // BY INDEX — what resolveFirstDoc returns it for. See
+        // resolver.candidate-pairing.test.ts for why re-deriving it is a trap.
+        const rel = candidates[doc.index].join("/");
+        title = rel.slice(rel.lastIndexOf("/") + 1);
+        documentId = mintDocId({
+            t: req.taskId,
+            s: sessionUuid,
+            p: projectRoot,
+            r: runId,
+            root: chosen.root,
+            rel,
+            rev,
+            f: docFingerprint(doc.absolute),
+        });
+        specText = readBounded(doc.absolute);
+    }
+    const foldMap = loadFoldMap(projectRoot);
+    const requirementsDocument = mintDocId({
+        t: req.taskId,
+        s: sessionUuid,
+        p: projectRoot,
+        r: runId,
+        root: projectRoot,
+        rel: SPEC_REL_PARTS.join("/"),
+        rev,
+        f: docFingerprint(specPath(projectRoot)),
+    });
+    // --- Commit + merge -------------------------------------------------------
+    // The marker must belong to THIS project's own origin repo (a sibling repo's
+    // PR number would grep our origin/main), and merge is only checked once the
+    // run completed — a per-poll git call mid-run is waste (§5.3).
+    const marker = extractPrMarker(req.transcript, await readOriginSlug(projectRoot, deps.git));
+    const merge = run && marker
+        ? await checkSquashMerged(projectRoot, marker.number, { git: deps.git, ...deps.merge })
+        : "unknown";
+    const slice2 = await buildSlice2Artifacts({
+        projectRoot,
+        runId,
+        events,
+        commit: run?.commit?.trim() || null,
+        git: deps.git,
+    });
+    // `runLive` retains its visual worktree meaning. Requirement planning has a
+    // separate authority: the server-owned task state, which can mark a run
+    // terminal while a worktree lingers (or active while root selection fell back).
+    const runLive = chosen.isWorktree && !req.taskTerminal && events.status !== "found";
+    const requirementLive = !req.taskTerminal && events.status !== "found";
+    // CONTRACT §6 order: Spec · Requirement · Tests · Review · Decisions · Commit.
+    const artifacts = [
+        buildSpecArtifact({
+            documentId,
+            title,
+            denied: !doc.ok && doc.reason === "denied",
+            fromWorktree: chosen.isWorktree,
+            intent: run?.intent ?? null,
+        }),
+        buildRequirementArtifact({
+            foldMap,
+            doc: iterateDoc,
+            events,
+            specText,
+            runLive: requirementLive,
+            sourceDocument: {
+                documentId: requirementsDocument,
+                title: "Requirements specification",
+            },
+        }),
+        ...slice2.artifacts,
+        buildCommitArtifact({ events, prNumber: marker?.number ?? null, prUrl: marker?.url ?? null, merge }),
+    ];
+    const requirement = artifacts[1];
+    const servesFrId = requirement.kind === "requirement" && requirement.detail?.rows.length
+        ? requirement.detail.rows[0].displayFrId
+        : null;
+    const context = {
+        schemaVersion: MISSION_CONTEXT_SCHEMA_VERSION,
+        scenario: "iterate",
+        missionTabVisible: true,
+        runId,
+        // IN FLIGHT = git still registers the pointer's worktree AND the run has not
+        // recorded completion. The worktree alone is a filesystem PROXY (external
+        // plan review, openai MEDIUM): an abandoned or already-finished run can
+        // leave a registered worktree behind, and "pending" for a run that is over
+        // is the same lie in the other direction. A `work_completed` record is a
+        // terminal fact, so it ends live-ness. Both inputs participate in `rev`
+        // (`chosen.root` + the event log's mtime), so neither can freeze in cache.
+        runLive,
+        artifacts,
+        // Shares artifacts-tests.ts's constructor so this never diverges from
+        // the Tests artifact's own `detail.results` on the `{0,0}` edge case.
+        tests: run ? toMissionTests(run.tests, run.ts) : null,
+        servesFrId,
+        sourceRev: rev,
+    };
+    // A TRANSIENT git failure is not cached: git's answer is not a statted file,
+    // so it cannot participate in `rev`, and caching it would pin Tests at
+    // "currently unavailable" until an unrelated source file changed. A merged-ref
+    // MISS is excluded for the same reason — the run may land on the ref after a
+    // later fetch, which `rev` would not see; re-resolving is cheap (the ref blob
+    // is TTL-cached in merged-events). A merged-ref HIT is stable and caches.
+    if (slice2.cacheable && !mergedRefMiss) {
+        if (cache.size >= CACHE_CAP)
+            cache.clear();
+        cache.set(cacheKey, { rev, context });
+    }
+    // `associate` comes from EVIDENCE — a validated pointer or a corroborated
+    // footer — never from the task's `state`, which decays to `idle` on a parked
+    // design gate. See association.ts.
+    return { context, associateRunId: associate, associateSource };
+}
+//# sourceMappingURL=resolver.js.map

package/server/dist/core/mission-context/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../../src/core/mission-context/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,KAAK,EACL,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,0EAA0E;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EACL,8BAA8B,GAI/B,MAAM,YAAY,CAAC;AASpB;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAmB,EACnB,OAAoB,EAAE;IAEtB,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC;IAEzC,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC7D,8EAA8E;IAC9E,0EAA0E;IAC1E,+EAA+E;IAC/E,gCAAgC;IAChC,EAAE;IACF,gEAAgE;IAChE,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,cAAc,CAAC;QAC9B,OAAO;QACP,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACpC,sBAAsB,EAAE,GAAG,EAAE,CAC3B,0BAA0B,CAAC,WAAW,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC;QACtE,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;KACzC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IAEtE,2EAA2E;IAC3E,IAAI,QAAQ,CAAC,oBAAoB,EAAE,CAAC;QAClC,OAAO,eAAe,CACpB,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,iBAAiB,EAC1B,gBAAgB,CAAC,YAAY,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,EAC/D,oFAAoF,EACpF,IAAI,CACL,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,qEAAqE;IACrE,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvD,OAAO;YACL,OAAO,EAAE,sBAAsB,CAAC;gBAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,WAAW;gBACX,WAAW;gBACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;gBAC7C,YAAY;gBACZ,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,YAAY,EAAE,GAAG,CAAC,YAAY;aAC/B,CAAC;YACF,cAAc,EAAE,IAAI;YACpB,eAAe,EAAE,wBAAwB;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnF,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAE3E,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,oEAAoE;IACpE,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAE/C,yEAAyE;IACzE,4EAA4E;IAC5E,MAAM,UAAU,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACtD,uEAAuE;IACvE,4EAA4E;IAC5E,sEAAsE;IACtE,kEAAkE;IAClE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,oBAAoB,CAC1D,WAAW,EACX,KAAK,EACL,MAAM,CAAC,UAAU,EACjB,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAClB,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAE1D,+EAA+E;IAC/E,sEAAsE;IACtE,uEAAuE;IACvE,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG;QACjB,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC;KACzE,CAAC;IACF,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAErD,2EAA2E;IAC3E,+EAA+E;IAC/E,MAAM,GAAG,GAAG,gBAAgB,CAC1B;QACE,GAAG,YAAY;QACf,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC;QAClC,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC;QACrC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,EACD,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CACjC,CAAC;IACF,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,GAAG,WAAW,KAAK,WAAW,KAAK,KAAK,KAAK,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzG,+EAA+E;IAC/E,2EAA2E;IAC3E,8EAA8E;IAC9E,sCAAsC;IACtC,MAAM,SAAS,GACb,QAAQ,CAAC,WAAW,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,MAAM,eAAe,GACnB,QAAQ,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,wBAAwB,CAAC;IAEzF,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAC3B,0EAA0E;QAC1E,wEAAwE;QACxE,OAAO;YACL,OAAO,EAAE,MAAM,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC;YAC3E,cAAc,EAAE,SAAS;YACzB,eAAe;SAChB,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,GAAkB,IAAI,EAAE,KAAK,GAAkB,IAAI,EAAE,QAAQ,GAAkB,IAAI,CAAC;IAClG,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,2EAA2E;QAC3E,uEAAuE;QACvE,qCAAqC;QACrC,sDAAsD;QACtD,uEAAuE;QACvE,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,UAAU,GAAG,SAAS,CAAC;YACrB,CAAC,EAAE,GAAG,CAAC,MAAM;YACb,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG;YACH,GAAG;YACH,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;SAChC,CAAC,CAAC;QACH,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,oBAAoB,GAAG,SAAS,CAAC;QACrC,CAAC,EAAE,GAAG,CAAC,MAAM;QACb,CAAC,EAAE,WAAW;QACd,CAAC,EAAE,WAAW;QACd,CAAC,EAAE,KAAK;QACR,IAAI,EAAE,WAAW;QACjB,GAAG,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7B,GAAG;QACH,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;KACzC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,+DAA+D;IAC/D,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5F,MAAM,KAAK,GACT,GAAG,IAAI,MAAM;QACX,CAAC,CAAC,MAAM,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACvF,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC;QACxC,WAAW;QACX,KAAK;QACL,MAAM;QACN,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI;QACnC,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,4EAA4E;IAC5E,wEAAwE;IACxE,gFAAgF;IAChF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC;IACpF,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC;IAEvE,+EAA+E;IAC/E,MAAM,SAAS,GAAyB;QACtC,iBAAiB,CAAC;YAChB,UAAU;YACV,KAAK;YACL,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAC1C,YAAY,EAAE,MAAM,CAAC,UAAU;YAC/B,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,IAAI;SAC5B,CAAC;QACF,wBAAwB,CAAC;YACvB,OAAO;YACP,GAAG,EAAE,UAAU;YACf,MAAM;YACN,QAAQ;YACR,OAAO,EAAE,eAAe;YACxB,cAAc,EAAE;gBACd,UAAU,EAAE,oBAAoB;gBAChC,KAAK,EAAE,4BAA4B;aACpC;SACF,CAAC;QACF,GAAG,MAAM,CAAC,SAAS;QACnB,mBAAmB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;KACrG,CAAC;IAEF,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,UAAU,GACd,WAAW,CAAC,IAAI,KAAK,aAAa,IAAI,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW;QACxC,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,OAAO,GAAmB;QAC9B,aAAa,EAAE,8BAA8B;QAC7C,QAAQ,EAAE,SAAS;QACnB,iBAAiB,EAAE,IAAI;QACvB,KAAK;QACL,6EAA6E;QAC7E,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,2EAA2E;QAC3E,OAAO;QACP,SAAS;QACT,sEAAsE;QACtE,sEAAsE;QACtE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;QACrD,UAAU;QACV,SAAS,EAAE,GAAG;KACf,CAAC;IAEF,6EAA6E;IAC7E,uEAAuE;IACvE,+EAA+E;IAC/E,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,IAAI,SAAS;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3C,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,0EAA0E;IAC1E,6EAA6E;IAC7E,mCAAmC;IACnC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;AACjE,CAAC"}

package/server/dist/core/mission-context/review-record-entry.d.ts

@@ -0,0 +1,45 @@
+import type { ReviewRow } from "./types-slice2.js";
+/**
+ * How many review entries sit under record-level keys the caller does not read
+ * (Stage-3 doubt, D2).
+ *
+ * Recognising an entry BY SHAPE is this module's knowledge, which is why the
+ * walk lives here. Not hypothetical: the producer parks its Stage-1 gate in a
+ * sibling `gates` object TODAY and no webui code has ever looked at it, so a run
+ * whose spec gate found five things — two of them blocking — summarises as if
+ * they did not exist. Shape, not the name `gates`, so the NEXT sibling is
+ * disclosed the day it appears rather than the day somebody notices.
+ */
+export declare function unreadPassCount(record: Record<string, unknown>, knownKeys: ReadonlySet<string>): number;
+/**
+ * A pass this build has never heard of whose ENTRY does not validate.
+ *
+ * Tolerance is per-key; without this, FAILURE would be per-record — one unknown
+ * word in one unrecognised pass would replace five perfectly-parsed rows with an
+ * integrity fault. The priors differ by object: for a PINNED pass an unknown
+ * field value really is more likely corruption, but for a pass this build does
+ * not know, it is more likely the same evolution the key tolerance exists for,
+ * and the costs are asymmetric — calling evolution corruption destroys five
+ * healthy rows, calling corruption evolution costs one row already unknown
+ * (Stage-3 doubt, D5).
+ *
+ * The row is PRESENT and explicitly unreadable, never dropped, and
+ * `buildReviewArtifact` already folds an `unavailable` row into "their result is
+ * unknown". A malformed KEY is still a record-level fault: the key is the row's
+ * identity, and there is no honest row to degrade to without one.
+ */
+export declare function unreadableStranger(reviewType: string): ReviewRow;
+/**
+ * Map one producer entry. A `pending` type becomes `unavailable` with a count of
+ * `null`: nobody has answered, and rendering that as a completed review with
+ * zero findings is the exact "0 reads as clean" failure this artifact exists to
+ * prevent.
+ *
+ * Returns the row, or a STRING naming the first thing wrong with the entry —
+ * which the caller reports as an integrity fault for the whole record. That is
+ * deliberate for an unrecognised pass too: not knowing what a pass is called is
+ * evolution, but a pass whose own fields contradict each other is corruption,
+ * and answering corruption with a partial record would be the quiet lie.
+ */
+export declare function toRow(reviewType: string, entry: Record<string, unknown>): ReviewRow | string;
+//# sourceMappingURL=review-record-entry.d.ts.map

package/server/dist/core/mission-context/review-record-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-record-entry.d.ts","sourceRoot":"","sources":["../../../src/core/mission-context/review-record-entry.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAGV,SAAS,EAEV,MAAM,mBAAmB,CAAC;AA4E3B;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,GAC7B,MAAM,CAUR;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAchE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,CAgE5F"}